CVE-2012-4461
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。KVM（Kernel-based Virtual Machine，基于内核的虚拟机）是用于其中的一种虚拟化基础设施。 Linux kernel 3.6.9之前版本中的KVM子系统中存在漏洞，该漏洞源于在主机运行期间，程序使用了无XSAVE的qemu用户空间。通过在访客cr4寄存器中使用KVM_SET_SREGS ioctl设置来设置X86_CR4_
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2012-4461
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The KVM subsystem in the Linux kernel before 3.6.9, when running on hosts that use qemu userspace without XSAVE, allows local users to cause a denial of service (kernel OOPS) by using the KVM_SET_SREGS ioctl to set the X86_CR4_OSXSAVE bit in the guest cr4 register, then calling the KVM_RUN ioctl.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux Kernel KVM 本地拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会发布的开源操作系统Linux所使用的内核。NFSv4 implementation是其中的一个分布式文件系统协议。KVM（Kernel-based Virtual Machine，基于内核的虚拟机）是用于其中的一种虚拟化基础设施。 Linux kernel 3.6.9之前版本中的KVM子系统中存在漏洞，该漏洞源于在主机运行期间，程序使用了无XSAVE的qemu用户空间。通过在访客cr4寄存器中使用KVM_SET_SREGS ioctl设置来设置X86_CR4_
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2012-4461
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2012-4461
请登录查看更多情报信息。
Patches & Fixes for CVE-2012-4461 (1)
Vendor Advisories for CVE-2012-4461 (6)
-
🔗 https://bugzilla.redhat.com/show_bug.cgi?id=862900 x_refsource_CONFIRM
-
-
-
-
-
🔗 https://www.suse.com/support/update/announcement/2012/suse-su-20121679-1.html vendor-advisory x_refsource_SUSE
Mailing List Discussions for CVE-2012-4461 (2)
-
🔗 http://article.gmane.org/gmane.comp.emulators.kvm.devel/100742 x_refsource_MISC
-
🔗 http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00005.html vendor-advisory x_refsource_SUSE
Other References for CVE-2012-4461 (1)
-
🔗 http://www.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.6.9 x_refsource_CONFIRM
Same Patch Batch · n/a · 2013-01-22 · 10 CVEs total
| CVE-2012-2119 | MacVTap 缓冲区错误漏洞 | |
| CVE-2012-2137 | Linux Kernel KVM ‘kvm_set_irq()’函数本地缓冲区错误漏洞 | |
| CVE-2012-2372 | Linux Kernel RDS本地拒绝服务漏洞 | |
| CVE-2012-3364 | Linux kernel NCI多个远程基于栈的缓冲区错误漏洞 | |
| CVE-2012-4414 | Oracle MySQL SQL注入漏洞 | |
| CVE-2012-4918 | Call of Duty Elite for iOS 证书验证安全漏洞 | |
| CVE-2012-5616 | Apache CloudStack 本地信息泄露漏洞 | |
| CVE-2012-6096 | Nagios Core/Icinga ‘process_cgivars()’函数栈缓冲区溢出漏洞 | |
| CVE-2012-6502 | Microsoft Internet Explorer 安全漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
-
CVE-2026-78187
Piwigo Public Authentication cross site scripting -
CVE-2026-78186
Open5GS HSS hss-cx-path.c assertion -
CVE-2026-78178
jQWidgets jqx-all.js jqxBaseFramework.extend prototype pollu -
CVE-2026-78158
Open5GS AMF UEContextReleaseRequest Path improper authorizat -
CVE-2026-78157
Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-b
V. Comments for CVE-2012-4461
No comments yet